Legal
Privacy Policy
salamxp.com and our affiliated platforms (trip.salamxp.com, learn.salamxp.com) ("SalamXP", "we", "us") are operated by ARAYA NIKAH SOCIAL ENTERPRISE CO., LTD. We take your privacy seriously and comply with Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA"). This policy explains how we collect, use, disclose, and protect your personal data when you use our website.
Personal Data We Collect
We only collect what's necessary to provide our service, grouped by how you give it to us:
- When you sign in with a Google account ("Continue with Google") — only the name and email that Google has already verified. We never see or store your Google account password.
- When you sign in across our affiliated sites (salamxp.com ↔ learn.salamxp.com) — only your verified email is passed along, through an encrypted, single-use, 60-second-lived handshake, so you don't have to log in separately on each site.
- When you contact us via a contact form or other channel — the name, email, and message you provide.
- When you subscribe to our newsletter — your email, to send you relevant updates and offers (you can unsubscribe at any time).
- Website usage and cookies — with your consent, we use Google Analytics and Burst Statistics to understand overall visitor behavior (see "Cookies" below).
- On-site feature usage such as likes or saved trips/places — tied to your account only so we can show your own history back to you.
We do not collect credit-card or payment data directly. Any payment, if applicable, is processed by an industry-standard payment provider that holds that data directly — it never passes through our systems.
Purpose & Legal Basis for Processing
| Purpose | Legal basis (PDPA Section 24) |
|---|---|
| Providing the service you request (login, saved trips, relevant content) | Necessary for the performance of a contract / pre-contractual steps |
| Keeping the platform secure, preventing misuse, and diagnosing technical issues | Our legitimate interest, balanced against your rights |
| Analyzing and improving the site via analytics cookies (Google Analytics, Burst Statistics) | Your consent (via the cookie banner) |
| Sending relevant news, offers, or travel recommendations | Your consent (newsletter sign-up) and/or our legitimate interest for existing users — you can opt out at any time |
| Complying with law or a lawful order from a competent authority | Necessary for compliance with a legal obligation |
Disclosure to Third Parties
We disclose personal data, only to the extent necessary, to the following service providers, solely for the stated purposes — each bound by its own data-protection terms:
- Google — for Google sign-in and website analytics (Google Analytics), when you consent.
- Our email/newsletter provider — your email only, when you subscribe.
- Our affiliated platform (learn.salamxp.com) — only when you use the cross-platform sign-in described above.
Some of the providers above may be located or process data outside Thailand. Where that happens, we ensure appropriate data-protection safeguards as required by the PDPA.
We do not sell your personal data to third parties for their own marketing purposes.
Data Retention
We retain your personal data only for as long as necessary for the purposes stated in this policy, or as required by law. Once that period has passed, or if you request account deletion, we will delete the data or render it permanently unidentifiable.
Security Measures
We maintain appropriate technical and organizational measures to prevent unauthorized access, alteration, disclosure, or destruction of data, including encryption in transit (HTTPS) and restricting data access to those who genuinely need it.
Your Rights as a Data Subject Under the PDPA
You have the following rights over your personal data:
- The right to access and request a copy of your personal data
- The right to request correction to keep your data accurate, current, and complete
- The right to request deletion, destruction, or anonymization of your data
- The right to request restriction of processing in certain circumstances
- The right to object to the collection, use, or disclosure of your data
- The right to withdraw consent at any time (without affecting processing already carried out before withdrawal)
- The right to request data portability to another data controller, where the law permits
- The right to lodge a complaint with Thailand's Personal Data Protection Committee if you believe we are not complying with the law
You can exercise any of the above rights by contacting us below. We will act on your request within the timeframe required by law.
Changes to This Policy
We may update this policy from time to time to reflect changes in our service or the law. The "Last updated" date at the top of this page will always reflect the most recent revision.
Contact Us About Your Personal Data
If you have questions about this policy, or wish to exercise your rights under the PDPA, please contact us:
Email: info@salamxp.com
This policy is provided in English. If you need a Thai-language copy for legal purposes, contact us using the email above and we will provide one.
ARAYA NIKAH SOCIAL ENTERPRISE CO., LTD.
Juristic Person Registration No.: 0105565138468
Address: No. 254/60, Soi Ramkhamhaeng 112, Saphan Sung Subdistrict, Saphan Sung District, Bangkok 10240, Thailand
Email: info@salamxp.com
Certified by the Office of Social Enterprise Promotion (OSEP), No. 336 · Certified by Thailand's Revenue Department, No. SE000149
© 2026 ARAYA NIKAH SOCIAL ENTERPRISE CO., LTD. All rights reserved.